Privacy policy

This policy explains what personal data Aarishya collects when you visit our website or place an order, why we collect it, how long we keep it and who we share it with. It applies to aarishya.comand to any order placed through it. We are the data fiduciary for that information under the Digital Personal Data Protection Act, 2023, and we also follow the Information Technology Act, 2000 and the rules made under it where they still apply.

By using this site or placing an order you agree to your information being handled as described here. If you do not agree with something in this policy, please do not use the site — and tell us why, because we would rather fix it than lose you.

What we collect

Information you give us. Your name, delivery address, phone number and email address when you place an order; your phone number when you use order tracking or request an OTP; the contents of any message you send us on WhatsApp or by email; and any review or feedback you choose to submit.

Information collected automatically. Your IP address, browser type and version, device type, the pages you view, and the site that referred you. This comes from our own server logs and from the analytics described below.

Information from our partners. Our courier partners send us delivery status and, occasionally, a corrected or updated address or phone number for a parcel. Our payment gateway sends us whether a payment succeeded and a reference for it. Our messaging provider tells us whether an order message was delivered. We do not buy personal data from marketing lists, data brokers or directories.

Information we never see.Card numbers, UPI PINs, net-banking credentials and wallet details are entered on our payment gateway's hosted interface and never reach our servers. We store only a payment reference, the amount, and whether the payment succeeded.

Keeping it accurate. Please make sure the details you give us are correct and current — a wrong phone number or a stale address is the most common reason a parcel goes missing. If something changes before dispatch, message us and we will update it.

Someone else's details. If you send an order to another person, or give us their name, address or phone number for any other reason, you are confirming that you may share it with us and that we may use it to fulfil that order.

Why we use it

• To accept, process, pack and deliver your order, and to handle returns, replacements and refunds.
• To send you transactional messages on WhatsApp, SMS and email — an order confirmation, dispatch notice, tracking link, delivery confirmation and refund updates. These are not marketing and cannot be switched off while an order is active.
• To verify your identity by one-time password before showing you your order history.
• To answer your questions and keep a record of the conversation so you do not have to repeat yourself.
• To detect fraud, prevent abuse of discount codes, and meet our legal obligations under tax and consumer protection law.
• To send marketing messages — only if you have opted in, and every such message carries a way to opt out.

Who we share it with

We do not sell your personal data, and we do not share it for anyone else's advertising. We share the minimum necessary with:

• Payment processors — to take payment and process refunds. They receive your name, email, phone number and the order amount.
• Courier partners — to deliver your parcel. They receive your name, full delivery address and phone number.
• Messaging providers — to send order updates on WhatsApp and SMS. They receive your phone number and the contents of the message.
• Cloud hosting and analytics providers — who store our data and help us understand how the site is used.
• Government authorities — where we are legally required to disclose information, and only to the extent required. This includes courts, regulators and law enforcement acting within their jurisdiction.
• Our professional advisers — accountants and lawyers, where we need advice on a dispute, a refund or a tax question, and only the part of the record that is relevant.
• A buyer of the business — if Aarishya is ever sold, merged or reorganised, customer records may transfer with it. The buyer would be bound by this policy, and we would tell you before anything changed.

Instagram embeds

Our home page shows a few of our Instagram posts using Instagram's own embedded player. Those frames load from instagram.com when you scroll to them, and Meta may set cookies and see your IP address and browser details as a result — exactly as if you had opened the post on Instagram. We receive nothing from them beyond the post itself. Meta's privacy policy governs that, not ours.

Links to other sites

Some pages link out — to a courier's tracking page, a payment gateway, or our Instagram. Once you are on someone else's site this policy no longer applies and theirs does. We do not control how they handle your data, so it is worth reading their policy before you give them anything.

Cookies and analytics

We use a small number of cookies and similar browser storage. Some are strictly necessary — they remember the contents of your cart and keep you signed in to order tracking after an OTP check. These cannot be disabled without breaking the site.

The rest come from two third-party tags. Google Analytics 4 tells us, in aggregate, which pages are visited and where people leave. The Meta Pixel measures how our Instagram and Facebook advertising performs, and lets Meta show our ads to people who have visited the site — that one is advertising, not just measurement, and Meta receives your IP address and browsing on this site as a result.

You can block or delete cookies in your browser settings at any time, and both Google and Meta offer their own opt-outs; the store will continue to work, although your cart may not persist between visits.

How long we keep it

Order records, including invoices, are retained for eight years, as required by Indian tax and company law. Support conversations are kept for two years. Analytics data is retained in aggregated form for twenty-six months. Marketing contact details are kept until you withdraw consent, after which they are deleted within thirty days.

How we protect it

The site is served over TLS. Access to customer data is restricted to the team members who need it and is protected by individual accounts with two-factor authentication. Payment signatures are verified server-side before any order is recorded. These are the reasonable security practices and procedures required of us under the Information Technology Act, 2000 and the rules made under it. No system is perfectly secure, but if a breach affecting your data occurs, we will notify you and the Data Protection Board as the law requires.

Your rights

Under the Digital Personal Data Protection Act, 2023 you may ask us for a copy of the personal data we hold about you, ask us to correct anything inaccurate, ask us to erase data we no longer need, withdraw a consent you previously gave, and nominate someone to exercise these rights on your behalf if you are unable to.

Write to care@aarishya.com with the phone number or email address you used to order. We will verify that the request is yours and respond within thirty days. If you are unhappy with how we handle it, you may complain to the Data Protection Board of India.

You can withdraw your consent at any time. Two things follow from that: we may no longer be able to process an order or show you your order history, and we still have to keep whatever a law requires us to keep — invoices, for instance, which we cannot delete on request.

Children

Our store is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us personal data, write to us and we will delete it.

Changes to this policy

When we change this policy we update the date at the top of the page. If a change materially affects how we use your data, we will tell you by email or WhatsApp before it takes effect.

Governing law

This policy is governed by the laws of India, and the courts at Ahmedabad, Gujarat have jurisdiction over any dispute about it — without prejudice to your right as a consumer to approach a forum where you live. It sits alongside our terms of service.

Contact

Grievance Officer, Aarishya, Ahmedabad, Gujarat, India. Email care@aarishya.com, phone +919099682234. You can also reach us through our contact page. If you would like to ask about, request something relating to, or complain about how we handle your information, that is the address to use.